Staff IT Security Engineer

<div class="content-intro"><p>Amplitude is the leading AI analytics platform, helping over 4,700 customers—including Atlassian, Burger King, NBCUniversal, and Square—build better products and digital experiences. With powerful AI Agents embedded across our platform, teams can analyze, test, and optimize user experiences faster than ever. Ranked #1 across multiple categories in G2’s Winter 2026 Report, Amplitude is the best-in-class solution for product, data, and marketing teams. Learn more at <a href="http://amplitude.com">amplitude.com</a>.</p> <p>As an organization, we deliver for our customers by living our values. We operate from a place of humility, take ownership of problems and successes, approach challenges with a growth mindset, and put our customers at the center of everything we do.</p> <p><strong>Amplitude’s Commitment to Diversity Equity &amp; Inclusion (DEI): </strong>Amplitude believes that diversity enables the creation of better products, improves the ability to solve complex problems, and drives more powerful solutions. We strive to create an environment of inclusion—one focused on psychological safety, empathy, and human connection—that will allow employees of all backgrounds to thrive.</p></div><p>Amplitude is seeking an experienced&nbsp;<strong>Staff IT Security Engineer</strong> to design and build controls that define how Amplitude leverages frontier AI tooling at scale. This is a high-scope, hands-on position focused entirely on corporate and enterprise security, specifically tackling the risks that AI tools and AI-enabled workflows introduce into our environment. You will operate independently within a well-defined security program, partner closely with a Senior Staff IT Security Engineer, and align IT Security priorities while reporting directly to the CISO. This is an opportunity to have a significant impact, where you will be hands-on with building agentic solutions for detection, response and high-level automation.</p> <p>As a Staff IT Security Engineer, you will manage and execute day-to-day enterprise security operations across our corporate systems, including SaaS security posture, identity security (IdP/Okta), endpoint security, and access governance. This role is focused on enterprise-level problems and IT infrastructure security, not securing ML pipelines, models, or AI product features.</p> <p><strong>What You'll Do</strong></p> <ul> <li><strong>Enterprise Security Operations:</strong> Manage and execute day-to-day enterprise security operations across corporate systems, including SaaS security posture, IdP, endpoint, vulnerability management, and access governance, leveraging AI-assisted tooling to accelerate triage, analysis, and documentation at scale.</li> <li><strong>Identity &amp; Access Management:</strong> Execute complex Okta/IdP changes and maintain configurations for auth policies, adaptive MFA, SCIM provisioning, RBAC group management, and lifecycle automation. You will coordinate and execute access reviews across the enterprise to enforce least-privilege remediation, using AI tooling to summarize findings and draft stakeholder follow-ups.</li> <li><strong>AI Security &amp; Governance:</strong> Be crucial in defining AI security by reviewing AI tool permissions, connector/integration configurations, and data-sharing settings. You will build and maintain AI-powered security automation—designing and operating agentic pipelines to automate repeatable security workflows (like app approval triage and access review summarization) and ensuring the security architecture of those pipelines is sound.</li> <li><strong>Detection &amp; Response:</strong> Drive detection and response efforts by authoring CrowdStrike IOAs/IOCs, writing SIEM queries, and tuning alerts to reduce noise without losing coverage. You will handle incident triage, scoping, and containment, and produce post-mortem documentation in partnership with a senior engineer.</li> <li><strong>Risk &amp; Compliance:</strong> Conduct vendor and SaaS tool security reviews (intake, risk evaluation, remediation tracking, and sign-off coordination). Produce security metrics and reporting for operational tracking and CISO/exec audiences.</li> </ul> <p>What You'll Need</p> <ul> <li><strong>Experience:</strong> 5–8+ years in enterprise/corporate security with hands-on depth in at least two of the following areas: identity (Okta), endpoint (CrowdStrike/Kandji), SaaS security, or detection engineering.</li> <li><strong>Autonomy &amp; Ownership:</strong> You are a self-starter and self-managing, capable of working problems independently from initia